The way I use rtpengine, it rewrites SDP between the browser and Asterisk 1.4, terminating DTLS and ICE. Between the browser and rtpengine is RTP/SAVPF, while between rtpengine and Asterisk is RTP/AVP. rtpengine generates its keys in what I assume to be the same way the browsers do.

On 31 October 2014 10:51, Anthony Minessale <anthony.minessale@gmail.com> wrote:
The tool from pjsip mentioned above requires the keys for the srtp decryption.  Does the one you mention do it differently?


On Friday, October 31, 2014, Ben Langfeld <ben@langfeld.co.uk> wrote:
Anthony, I think I'm not understanding your concern. Could you explain what you mean by logging the keys?

On 30 October 2014 21:01, Anthony Minessale <anthony.minessale@gmail.com> wrote:
The bigger question is how to log the keys without compromising the point of why its all encrypted.
It would take some careful consideration.


On Thu, Oct 30, 2014 at 12:32 PM, Ben Langfeld <ben@langfeld.co.uk> wrote:
rtpengine does indeed allow decryption of DTLS encrypted RTP. I use it in front of Asterisk 1.4 for exactly that (and ICE resolution).

On 30 October 2014 14:55, Carlos Ruiz Díaz <carlos.ruizdiaz@gmail.com> wrote:
rtpengine doesn't provide any mean to do any kind of decryption. The keys, however, are easily accessible if you are willing to modify the original software to create such functionality.

Regards,
Carlos

On Thu, Oct 30, 2014 at 10:47 AM, Anthony Minessale <anthony.minessale@gmail.com> wrote:
This is a philosophical debate as to weather or not making the key available somewhere it can be obtained from nullifies the intended security.
 

On Thu, Oct 30, 2014 at 5:33 AM, Ben Langfeld <ben@langfeld.co.uk> wrote:
Look into rtpengine and perhaps Kamailio to control it.

On 30 October 2014 04:41, Varghese Paul <varghesepaul87@gmail.com> wrote:
Hi all,

We are using freeswitch for handling webrtc calls and the negotiation in DTLS mode.

We are looking for a tool to decrypt the traffic between the webrtc client and freeswitch server. I know there is already a tool pcaputils from PJSIP for decrypting the SRTP traffic. Since we are using in DTLS mode we can't use this.

Can any one suggest any tool/method to decrypt the webrtc audio?

Regards

Varghese Paul


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org



--
Anthony Minessale II       ♬ @anthmfs  ♬ @FreeSWITCH  ♬


_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org